CVE-2026-28553_CVE-2026-28553

6.9 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L

Description

Vulnerability of improper permission control in the theme setting module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Basic Information

ID CVE-2026-28553

Source huawei

Published Apr 13, 2026 at 03:53

Affected Product

Vendor Huawei

Product HarmonyOS

Version 4.3.1

Affected Versions Huawei HarmonyOS 4.3.1
Huawei HarmonyOS 4.3.0
Huawei HarmonyOS 4.2.0
Huawei HarmonyOS 4.0.0
Huawei EMUI 15.0.0
Huawei EMUI 14.2.0
Huawei EMUI 14.0.0

CWE Classification

CWE-275

References

consumer.huawei.com /en/support/bulletin/2026/4/

{
    "lastseen": "",
    "description": "Vulnerability of improper permission control in the theme setting module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
    "published": "2026-04-13T03:53:07.148Z",
    "modified": "2026-04-13T03:53:07.148Z",
    "type": "cve",
    "title": "CVE-2026-28553",
    "source": "huawei",
    "references": "https://consumer.huawei.com/en/support/bulletin/2026/4/",
    "id": "CVE-2026-28553",
    "bulletinFamily": "",
    "cwe": [
        "CWE-275"
    ],
    "cvelist": null,
    "sourceData": "Huawei HarmonyOS 4.3.1\nHuawei HarmonyOS 4.3.0\nHuawei HarmonyOS 4.2.0\nHuawei HarmonyOS 4.0.0\nHuawei EMUI 15.0.0\nHuawei EMUI 14.2.0\nHuawei EMUI 14.0.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "HarmonyOS",
    "version": "4.3.1",
    "vendor": "Huawei",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}